home

TextViewer.EXE

TextViewer

Klaus Schwenk

This is a setup program which is used to install the application. The file has been seen being downloaded from s8540.chomikuj.pl.
Publisher:
Klaus Schwenk

Product:
TextViewer

Version:
1, 4, 0, 0

MD5:
24e8022cf2426e98acfa473ac088e1b9

SHA-1:
b4f7d3dd71c6a0681cb5756ae412bd998ac43dc9

SHA-256:
0d0659f9b116624bd6d2686943fe92b24bc83f374a870a2c78d65edb9a0516cd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:28:30 AM UTC  (today)

File size:
142.5 KB (145,920 bytes)

Product version:
1, 4, 0, 0

Copyright:
Copyright (C) 2001-2003 Klaus Schwenk

Original file name:
TextViewer.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\textviewer.exe

File PE Metadata
Compilation timestamp:
2/12/2003 8:07:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:q5ojxJr3Z9jI9QTMIlVBlk+SkoFAUtWAXzrXmnIEt/3SeCmjyAYSCdF:qKT3jqcdlW+Z2AJADIIY3SeCafod

Entry address:
0xC29C

Entry point:
B8, 7C, 0A, 45, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 2B, 33, A6, 33, F8, EB, B7, 64, 6F, DA, 84, 67, 8B, C6, 00, 50, 08, D7, 9B, DC, 27, 6B, 2F, C1, 3C, D9, B9, 2C, 4D, F3, D2, 67, C7, 1D, 1C, 11, C6, 32, AF, C4, 4C, 5B, 71, 46, B9, D9, 03, 59, 76, 0A, 2D, 01, 97, BB, 89, CE, 3F, DA, 2B, 70, AD, DE, 69, C2, A0, 2E, 69, 19, 02, EB, 57, 8D, 4F, FE, 8C, F1, B2, 22, 44, 08, D9, 79, 7E, 74, 64, 0F, 11, D8, 84, D1, 08, EB, 65...
 
[+]

Packer / compiler:
PECompact v2

Code size:
208 KB (212,992 bytes)

The file TextViewer.EXE has been seen being distributed by the following URL.

http://s8540.chomikuj.pl/File.aspx?e=j2iMZSOaCVCQLKE6o-7F4Vsqvkrw9I8gJW4cuSQ2qzRKJga4_BqOn8kIiVOFOX6yNFkbYOlRnX0tjon7elDk8y7T05wDx3SO6lfeP7jHk49-6-LiK5UrjfnwpWasMpdin-qlos9fMNczOfYKONg8PC0xfGtYLrnJsIIgPgLaR3fopqYXF0r-jFCbGcvKPSYl44nZXG833CFk4UvCIIBk6Losk4ONOHxXOhukHf5WID52_v3h8eu2g5ppvkCaKOXrt4Pc6v24ShL6rH3JefafufK1vq2Qok4mofKk-QtfuTHoXtxtWihJB1FvHGw3jYTDuV36ORPdWL-vHLrJv9WpGNuVVIB-UR4D6JeCZ0JSsKEWwV58tkEDV32ekHPUqteKMsixroVs5PSIqeqEAPCFTA&pv=2

Scan TextViewer.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.